GHSA-5pjj-7m4p-wfh2Medium

ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack

Published
May 17, 2022
Last Modified
February 7, 2024

🔗 CVE IDs covered (1)

CVE-2010-4338 →

📋 Description

ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.

🎯 Affected products1

  • pip/ocrodjvu:= 0.4.6-1

🔗 References (5)